Azure Automation Update Management

Question

Hi folks,

I am currently working on migration from Azure Automation Update Management to Azure Update Manager to apply patches to my Windows servers.

We are doing a lift and shift of the schedules from AA Update Management to Azure Update Manager and while analyzing existing schedules in AA Update Management and the OS patch installations, I found some discrepancies as below and would request your kind help to understand that.

I have a schedule created for VM to push Critical and Security updates on 1st of every month. However, when I checked one of the VMs attached to this schedule what I found was that the VMs are getting patched very next day of the patch Tuesday of that month i.e. if patch Tuesday of August'24 was 13th, patch was installed on the machine on 14th August'24.

When I checked update settings of the machine, confusingly enough it is set to Auto Update, which could be the possible reasons why the patches are being installed on the patch Tuesday.

Now, my question is, if I have added the machines to the schedule under AA Update Management, how and why the monthly patches were being installed on patch Tuesdays, overriding the Update Management's schedules.

Also, how can I set the update settings in OS to respect the AA Update Management schedule.

PFB required snips.

AA Update Management schedule:

Patch installation dates in OS:

Update settings of OS:

Thanks in advance for helping!

Cheers!

Apurva

Answer 1

In short Azure Update management does not configure the Windows Update settings on your machines. It is up to you to configure those machines to manual installation of updates otherwise automatic update on the machine will install updates regardless of the Azure Update Management schedules.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.